News for hackers. Stuff that matters.

A comment on Login.gov encryption is badly designed. Parent comment

Re:Login.gov encryption is badly designed by alaithea on Sunday September 10, 2017 @11:42PM (#15215745)
The OP seems to misunderstand the function of NIST, as well. NIST does not "approve" other agencies' software systems. NIST is a standards-setting organization only. They create and publish standards, but do not enforce them.
[ Parent | on HN ]
Re:Login.gov encryption is badly designed by sdrapkin on Monday September 11, 2017 @10:31AM (#15218766)
The OP is referring to the OP-linked 18F writeup (you might want to read it), which says "Based on consultation with NIST we follow these steps..."
[ Parent | on HN ]